Re: Snort Tool Evaluation

[Dirk Geschke <Dirk_Geschke () genua de>]

Hi Ty,

> Checkout the book "Managing Security with Snort and IDS Tools".  It's
> an Oreilly book and it goes over a good amount of the tools designed
> for snort.  From preprocessors to Web interfaces and Consoles, what
> works with High Bandwidth deployments, etc.  I don't believe it covers
> OpenAanval though.  You can extract the pro's and cons from there.

did you read this book? I just did this and it is by far the uggliest
book I have seen either by O'Reilly or covering snort.

If you read the documentation which comes with snort you will get
better informations than this book will give you.

If you are looking for a good book then take 

Snort 2.1 Intrusion Detection, Second Edition ISBN 1-931836-04-3
by Brian Caswell and Jay Beale

(Ok, I didn't read this book but the first edition covering snort-2.0
and this book was quite useful. So I expect the second edition will be too.)

Best regards

Dirk

PS: There are more books on snort available but I read this two books. 
So I can't say anything to the other ones. They might be good or not but
the O'Reilly book is definitively not useful.


-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users